6 alphanumeric, case insensitive characters only allow for about 2 billion unique combinations. I’d have guessed there were more reservations made than that?

Or are PNR locators recycled after a while?

Yes, I've got in my drawer two physical boarding passes with the same PNR